Page 2 of 2

Re: Lime SJ2.5 hacking

Posted: Fri May 14, 2021 7:58 am
by CDogg
Does anyone know where to find a stock flash tutorial for this controller? I have a controller in good condition and the dash seems to work ok when plugged in on the charger. I'd like to power it on using a button or switch as the IoT was deleted by previous owner and doesn't appear to have ble module anywhere else. Any help with this controller would be much appreciated! Or directions on how to flash please 🙏

Re: Lime SJ2.5 hacking

Posted: Sat Aug 14, 2021 12:26 am
by azorox
Hi I playing with this, but I get a lot of hex E0 E0 E0 ... message from the scooter, but none of sent codes do anything. zs2.5 model. Anyone has a tip?

Re: Lime SJ2.5 hacking

Posted: Tue May 24, 2022 10:11 am
by htamas
Hello!

Did somebody find new working hex codes for LIS01_FW_1.8.5_201911162121000 ?

Re: Lime SJ2.5 hacking

Posted: Wed Jun 22, 2022 2:25 pm
by CDogg
Hello!

Did somebody find new working hex codes for LIS01_FW_1.8.5_201911162121000 ?
I'm still working on finding a way to operate it with just hardware mods. I'm pretty sure there's a way to replace the IoT power on with a physical switch. looking to any electrical engineers for advice. I'm happy to donate hardware, schematics, battery or whatever would be required to anyone willing to help.

Re: Lime SJ2.5 hacking

Posted: Wed Jul 20, 2022 10:31 am
by Scrubb3
Any updates on the LIS01_FW_1.8.5_201911162121000 start-up HEX commands? Just got my SPP hooked up and was hoping someone smarter than me on the subject would have made some progress. It was cool to actually see the few commands that people managed to cipher working but unfortunately the light blinking one has nothing to reverse it's effect. Hoping there is still someone making progress concerning this situation...

Re: Lime SJ2.5 hacking

Posted: Fri Jul 22, 2022 12:15 pm
by CDogg
Any updates on the LIS01_FW_1.8.5_201911162121000 start-up HEX commands? Just got my SPP hooked up and was hoping someone smarter than me on the subject would have made some progress. It was cool to actually see the few commands that people managed to cipher working but unfortunately the light blinking one has nothing to reverse it's effect. Hoping there is still someone making progress concerning this situation...
Not sure if you'll find what you need, but I found a bunch of relevant info in the Wiki that I hadn't seen before. Link is at the top of the page.

Re: Lime SJ2.5 hacking

Posted: Thu Jul 28, 2022 12:59 pm
by Scrubb3
I just found out how the guy on reddit got the hex commands in the first place. He did not remove the SIM card or the bigger circuit board. He just attached the SPP bluetooth module and unlocked the scooter via the official lime application. He recorded the flood of HEX that the scooter submitted upon unlocking and found the command. I'm going to try this on my project.

Re: Lime SJ2.5 hacking

Posted: Wed Dec 07, 2022 10:55 am
by dani3l0
For quite a long time I've been trying to turn on the scooter via Serial. Finally (or yet), I didn't manage to do it.
I've send over 70000 various commands to the controller. The 'valid' commands get echoed, however nothing happens with the electronics.
Disassembling the firmware didn't help either (I'm kinda scared of Assembly)

(I'm on 1.8.5 FW)

Here's my bruteforce script written in Python, might help someone (or not)
https://gitlab.com/dani3l0/limesj2.5-stuff

Re: Lime SJ2.5 hacking

Posted: Thu Jun 01, 2023 8:21 am
by AlistairESP
how i use the java i have to use bluetooth

Re: Lime SJ2.5 hacking

Posted: Thu Jun 01, 2023 8:21 am
by AlistairESP
how i use the java i have to use bluetooth